Vulnerabilities (CVE)

Filtered by vendor Jetbrains Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-25775 1 Jetbrains 1 Teamcity 2022-07-12 5.5 MEDIUM 3.8 LOW
In JetBrains TeamCity before 2020.2.1, the server admin could create and see access tokens for any other users.
CVE-2021-25755 1 Jetbrains 1 Code With Me 2022-07-12 1.9 LOW 2.5 LOW
In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic.
CVE-2022-29812 1 Jetbrains 1 Intellij Idea 2022-05-05 2.1 LOW 2.3 LOW
In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficient
CVE-2022-29816 1 Jetbrains 1 Intellij Idea 2022-05-05 2.1 LOW 3.3 LOW
In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible
CVE-2022-29820 1 Jetbrains 1 Pycharm 2022-05-05 3.3 LOW 3.5 LOW
In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible
CVE-2020-24366 1 Jetbrains 1 Youtrack 2021-07-21 2.1 LOW 3.3 LOW
Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups.
CVE-2020-11686 1 Jetbrains 1 Teamcity 2021-07-21 4.0 MEDIUM 2.7 LOW
In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings.
CVE-2021-26309 1 Jetbrains 1 Teamcity 2021-05-19 2.1 LOW 3.3 LOW
Information disclosure in the TeamCity plugin for IntelliJ before 2020.2.2.85899 was possible because a local temporary file had Insecure Permissions.
CVE-2021-31906 1 Jetbrains 1 Teamcity 2021-05-14 4.0 MEDIUM 2.7 LOW
In JetBrains TeamCity before 2020.2.2, audit logs were not sufficient when an administrator uploaded a file.
CVE-2020-11692 1 Jetbrains 1 Youtrack 2020-04-27 4.0 MEDIUM 2.7 LOW
In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators.